As an example, many customers are asking to connect our SaaS solutions to their internal network via some site2site tunnel, so they can just keep their legacy databases like they are. However, our implementation consultants have tried doing things like this and it's ... not pretty. Like, it's possible, but hard to manage and hard to maintain.

However again, it's hard for a solution consultant or development team directly involved in the project implementation to say no and it always results in discussions that are hard to do, because your only real argument is "I don't want to implement that". And that's when it becomes helpful to refer to us in operations/security as some external authority. Suddenly "I don't want to implement this nonsense" becomes "Sorry, but our plattform operations team is blocking this implementation due to several internal security policies. There is very little I can do, except for trying to setup a call with them, but you know how busy security folks can be".